CVE-2026-61959

The vulnerability allows for Cross Site Scripting (XSS) attacks in the Business Directory application for versions up to 6.4.24, potentially enabling attackers to execute malicious scripts in the context of a user's session. This can lead to unauthorized access to sensitive information or manipulation of user interactions. Organizations using affected versions should prioritize remediation to protect against potential exploitation.